Allow changing of passwords outside 'forgot password' flow (Fixes #318)